AMENDMENT TO THE CLAIMS 

1 . (Currently Amended) A method for controlling access to a 
networked peripheral device by a walk-up user, wherein the networked peripheral device is 
accessible by both the walk-up user and a r emote use r based on centralized access 
management information, the method comprising: 

receiving access management information for the walk-up user at the 
networked peripheral device from a centralized location; 

determining, at the networked peripheral device, a function of l e vel of 
acc e ss to the networked peripheral device and a quota corresponding to the function that 
are available to the walk-up user based on the received access management information; 
and 

allowing the walk-up user [[to]] access [[the]] to the networked peripheral 
device based on the determined level of access function and the determined quota 
corresponding to the function . 

2. (Original) A method according to claim 1, wherein the networked 
peripheral device is a multifunction peripheral device. 

3. (Currently Amended) A method according to claim 1, wherein the 
access management information is supplied by an authentication server once the 
authentication server authenticates the [[walk-up]] user based on authentication 
information received from the networked peripheral device. 

-2- 



4. (Currently Amended) A method according to claim 1 , wherein a 
user interface is devised by the networked peripheral device that is specific to the 
determined access level function and corresponding quota . 

5. (Currently Amended) A method according to claim 1 , wherein 
buttons on a keypad on the device are enabled and/or disabled according to the determined 
access l e vel function and corresponding quota . 

6. (Currently Amended) A method according to claim 1 , wherein the 
user is a walk-up user, and wherein the access management information is supplied by an 
authentication server that authenticates both the walk-up user and a [[the]] remote user. 

7. (Original) A method according to claim 3, wherein the 
authentication information is a username and/or password. 

8. (Original) A method according to claim 3, wherein the 
authentication information is entered by inserting a smart card at the networked peripheral 
device. 

9. (Original) A method according to claim 6, wherein the access 
management information is encrypted. 
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10. (Original) A method according to claim 3, wherein the 
authentication information received from the networked peripheral device is encrypted. 



1 1 . (Currently Amended) A computer-readable memory medium in 
which computer-executable process steps are stored, the process steps for controlling 
access to a networked peripheral device by a walk-up user, wherein the networked 
peripheral device is accessible by both the walk-u p user and a remote use r based on 
centralized access management information, wherein the process steps comprise: 

a receiving step to receive access management information for the walk-up 
user at the networked peripheral device from a centralized location; 

a determining step to determine, at the networked peripheral device, a 
function of lev e l of access to the networked peripheral device and a quota corresponding to 
the function that are available to the walk-up user based on the received access 
management information; and 

an allowing step to allow the walk-up user [[to]] access [[the]] to the 
networked peripheral device based on the determined l e vel of access function and the 
determined quota corresponding to the function . 

12. (Currently Amended) A computer-executable program code stored 
on a computer readable medium, said computer-executable program code for controlling 
access to a networked peripheral device by a walk-u p user, wherein the networked 
peripheral device is accessible by both the walk-up user and a remote use r based on 
centralized access management information, said computer-executable program code 
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comprising: 

code to receive access management information for the walk-up user at the 
networked peripheral device from a centralized location; 

code to determine, at the networked peripheral device, a function of ievei-of 
access to the networked peripheral device and a quota corresponding to the function that 
are available to the walk-up user based on the received access management information; 
and 

code to allow the walk-up user [[to]] access [[the]] to the networked 
peripheral device based on the determined l e vel of access function and the determined 
quota corresponding to the function . 

13. (Currently Amended) An apparatus for controlling access to a 
networked peripheral device by a walk-up user, wherein the networked peripheral device is 
accessible by both the walk-up user and a r e mote user based on centralized access 
management information, said apparatus comprising means for performing the functions 
specified in any of Claims 1 to 10. 

14. (Currently Amended) Computer-executable process steps stored on 
a computer readable medium, said computer-executable process steps for controlling 
access to a networked peripheral device by a walk-up user, wherein the networked 
peripheral device is accessible by both the walk-up user and a remote user based on 
centralized access management information, said computer-executable process steps 
comprising process steps executable to perform a method according to any of Claims 1 to 
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15. (Currently Amended) A server for use in controlling access to a 
networked peripheral device by a walk-up user, wherein the networked peripheral device is 
accessible by both the walk-up user and a remote user based on centralized access 
management information, the server comprising a processor executing processing steps for : 

receiving a request for access policy management information, the request 
including authentication information; 

authenticating the user using the authentication informattion information ; 

and 

transmitting access policy management information for the user indicating a 
function of the networked peripheral device and a quota corresponding to the function that 
are available to the user , in a case that authentication of the user is successful. 

16. (Currently Amended) A server according to claim 15, wherein said 
server retrieves authentication information for the user from a directory service. 
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